ryandens / javaagent-gradle-plugin

A set of Gradle plugins to ease building Java applications that leverage instrumentation agents in development and/or in production
Apache License 2.0
47 stars 8 forks source link

Update gradle/actions action to v3.5.0 #128

Closed renovate[bot] closed 1 month ago

renovate[bot] commented 2 months ago

Mend Renovate

This PR contains the following updates:

Package Type Update Change
gradle/actions action minor v3.3.2 -> v3.5.0

Release Notes

gradle/actions (gradle/actions) ### [`v3.5.0`](https://togithub.com/gradle/actions/releases/tag/v3.5.0) [Compare Source](https://togithub.com/gradle/actions/compare/v3.4.2...v3.5.0) This release contains a major upgrade to `gradle-home-cache-cleanup` as well as improvements to dependency-submission. ##### What's Changed - Include Gradle 8.9 in known wrapper checksums (avoiding the need to download) ([#​266](https://togithub.com/gradle/actions/issues/266)) - Improvements to cache-cleanup - Provision latest Gradle version to use for cache-cleanup ([#​33](https://togithub.com/gradle/actions/issues/33), [#​271](https://togithub.com/gradle/actions/issues/271)) - Avoid use of timestamp manipulation for cache-cleanup ([#​24](https://togithub.com/gradle/actions/issues/24), [#​272](https://togithub.com/gradle/actions/issues/272)) - Cleanup artifact transforms cache in Gradle home ([#​47](https://togithub.com/gradle/actions/issues/47)) - More logging from cache-cleanup operation ([#​169](https://togithub.com/gradle/actions/issues/169)) - Use latest dependency graph plugin ([#​269](https://togithub.com/gradle/actions/issues/269)) - Avoid resolving configurations that are deprecated for resolving ([https://github.com/gradle/github-dependency-graph-gradle-plugin/pull/129](https://togithub.com/gradle/github-dependency-graph-gradle-plugin/pull/129)) - Avoid circular task dependency when build includes itself ([https://github.com/gradle/github-dependency-graph-gradle-plugin/issues/141](https://togithub.com/gradle/github-dependency-graph-gradle-plugin/issues/141)) - Automatically upload dependency graph file on submission failure ([#​291](https://togithub.com/gradle/actions/issues/291)) **Full Changelog**: https://github.com/gradle/actions/compare/v3.4.2...v3.5.0 ### [`v3.4.2`](https://togithub.com/gradle/actions/releases/tag/v3.4.2) [Compare Source](https://togithub.com/gradle/actions/compare/v3.4.1...v3.4.2) This patch release fixes a race condition that resulted in the `DEVELOCITY_ACCESS_KEY` variable not being set in the environment. ##### What's Changed - Fix race condition with fetching short lived token by [@​alextu](https://togithub.com/alextu) in [https://github.com/gradle/actions/pull/260](https://togithub.com/gradle/actions/pull/260) **Full Changelog**: https://github.com/gradle/actions/compare/v3.4.1...v3.4.2 ### [`v3.4.1`](https://togithub.com/gradle/actions/releases/tag/v3.4.1) [Compare Source](https://togithub.com/gradle/actions/compare/v3.4.0...v3.4.1) This patch release fixes a bug introduced in v3.4.0, that prevents build scan publication to Develocity. The bug results in the removal of the `DEVELOCITY_ACCESS_KEY` variable being removed, so that Gradle cannot authenticate with the Develocity server. ##### What's Changed - Don't clear access key when access token cannot be obtained by [@​cdsap](https://togithub.com/cdsap) in [https://github.com/gradle/actions/pull/258](https://togithub.com/gradle/actions/pull/258) - Simplify requesting short-lived Develocity access tokens by [@​bigdaz](https://togithub.com/bigdaz) in [https://github.com/gradle/actions/pull/259](https://togithub.com/gradle/actions/pull/259) **Full Changelog**: https://github.com/gradle/actions/compare/v3.4.0...v3.4.1 ### [`v3.4.0`](https://togithub.com/gradle/actions/releases/tag/v3.4.0) [Compare Source](https://togithub.com/gradle/actions/compare/v3.3.2...v3.4.0) This release improves the integration with Gradle Develocity®, as well as updating a number of key dependencies. - The new `develocity-access-key` input parameter allows the action to generate a short-lived access token for subsequent communication with Develocity. This reduces the risk of the full (long-lived) access key being compromised, either accidentally or by a malicious action. - New input parameters are available to configure Develocity injection. Previously Develocity injection could only be enabled by setting environment variables. - Checksums for Gradle 8.8 are now included, so that no network request is required for `wrapper-validation` with Gradle 8.8 wrappers. ##### What's Changed - Add support for short-lived tokens by [@​alextu](https://togithub.com/alextu) in [https://github.com/gradle/actions/pull/224](https://togithub.com/gradle/actions/pull/224) - Update known wrapper checksums by [@​github-actions](https://togithub.com/github-actions) in [https://github.com/gradle/actions/pull/240](https://togithub.com/gradle/actions/pull/240) - Update to Gradle 8.8 by [@​bigdaz](https://togithub.com/bigdaz) in [https://github.com/gradle/actions/pull/251](https://togithub.com/gradle/actions/pull/251) - Adding Develocity input actions by [@​cdsap](https://togithub.com/cdsap) in [https://github.com/gradle/actions/pull/244](https://togithub.com/gradle/actions/pull/244) - Fail on invalid boolean for Develocity inputs by [@​bigdaz](https://togithub.com/bigdaz) in [https://github.com/gradle/actions/pull/252](https://togithub.com/gradle/actions/pull/252) ##### New Contributors - [@​serieznyi](https://togithub.com/serieznyi) made their first contribution in [https://github.com/gradle/actions/pull/216](https://togithub.com/gradle/actions/pull/216) - [@​lokalpage-safe](https://togithub.com/lokalpage-safe) made their first contribution in [https://github.com/gradle/actions/pull/205](https://togithub.com/gradle/actions/pull/205) - [@​alextu](https://togithub.com/alextu) made their first contribution in [https://github.com/gradle/actions/pull/224](https://togithub.com/gradle/actions/pull/224) - [@​bot-githubaction](https://togithub.com/bot-githubaction) made their first contribution in [https://github.com/gradle/actions/pull/227](https://togithub.com/gradle/actions/pull/227) - [@​antonmos](https://togithub.com/antonmos) made their first contribution in [https://github.com/gradle/actions/pull/234](https://togithub.com/gradle/actions/pull/234) - [@​cdsap](https://togithub.com/cdsap) made their first contribution in [https://github.com/gradle/actions/pull/244](https://togithub.com/gradle/actions/pull/244) **Full Changelog**: https://github.com/gradle/actions/compare/v3.3.2...v3.4.0

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.



This PR was generated by Mend Renovate. View the repository job log.